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Abstract. Computational Galois theory, in particular the prob- 
lem of computing the Galois group of a given polynomial is a very 
old problem. Currently, the best algorithmic solution is Stauduhar's 
method. Computationally, one of the key challenges in the appli- 
cation of Stauduhar's method is to find, for a given pair of groups 
H < G a G- relative H- invariant, that is a multivariate polynomial 
F that is i7-invariant, but not G-invariant. While generic, theo- 
retical methods are known to find such F, in general they yield 
impractical answers. We give a general method for computing in- 
variants of large degree which improves on previous known meth- 
ods, as well as various special invariants that are derived from the 
structure of the groups. We then apply our new invariants to the 
task of computing the Galois groups of polynomials over the ra- 
tional numbers, resulting in the first practical degree independent 
algorithm. 



1. Introduction 

Computational Galois theory, in particular the problem of finding the 
Galois group of a given polynomial is a very old problem. While various 
algorithms have been published, so far they are either impractical for 
groups of size > 1000 due to the requirement of exact representation of 
an algebraic splitting field, or they are degree dependent. Examples of 
algorithms of the first kind include for example the naive approach of 
constructing a splitting field by repeated factorisation as well as more 
sophisticated methods [2T] . Algorithms of the second kind fall broadly 
into two approaches: a classical approach that aims to characterise the 
Galois group as an abstract group by building a decision tree using 
certain indicators (resolvent polynomials) (3j Chapter 6.3] and a newer 
approach, by Stauduhar [20] where the Galois group is constructed 
explicitly as a group of permutations of the roots of the polynomial in 
question. Stauduhar's method roughly works by traversing the lattice 
of (transitive) subgroups of the full symmetric group from the top (S„) 

down to the Galois group of the polynomial. At each step, this is 

l 
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done through the help of invariants and the high precision evaluation 
of those. 

This paper naturally splits into two parts: the first discussing the 
problem of finding a useful invariant for each pair of groups, and the 
second part explaining how this is used to compute Galois groups of 
polynomials over Q. 

Primitive invariants for permutation groups, i.e. multivariate poly- 
nomials with a given stabiliser, are among the most important ob- 
jects in computational Galois theory, they are the central ingredient in 
Stauduhar's method [U [TO] for the determination of the Galois group 
of a polynomial /: Given two groups H < G a (G-relative) if -invariant 
is used to decide if Gal(/) < H 9 for some g G G under the assumption 
that Gal(/) < G. Furthermore, applications, such as the explicit real- 
ization of Galois groups by explicitly computing defining equations for 
subfields of the splitting field for / rely on invariants as well [15] . 

While there are a few methods known for the computation of such 
invariants in the literature, in applications, invariants were mostly the 
result of ad-hock methods. Generic algorithms, eg. [DEEE] for individual 
invariants or [13] for the computation of the entire ring of invariants 
become rapidly unpractical for larger degree permutation groups. 

It should be stressed that while invariant theory gives explicit in- 
variants for all pairs of groups H < G, the generic results tend to 
be impractical as the resulting invariants are computationally far too 
complex. 

In what follows, we will give a new, space-efficient algorithm to com- 
pute all invariants of a given degree for arbitrary pairs of groups, and for 
maximal subgroups of transitive groups we give several constructions 
that allow the determination of efficient invariants in many cases. We 
then demonstrate that knowledge of the subgroup structure can also 
be used to find efficient invariants as frequently invariants for some 
subgroups can be combined to give invariants for others. 

Finally, we demonstrate the efficiency and the limits of our methods 
by considering several examples. 

2. Notation 

Transitive groups of degree < 32 are denoted by nTm where m is 
the degree and n is the number of the group in the classification [I] 
used by both Magma and Gap. For the rest of the article, we fix some 
positive integer n. The symmetric group on n elements, S n acts on the 
polynomial ring Z[X] = . . . , X n ] in n variables via 
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for er £ S n we usually write F a for the image under this map. A 
polynomial F G Z[Jf] is called an if-invariant (for some group H < S„) 
if F a = F for all a G H . Given two subgroups H < G < S n , we 
call a polynomial F G Z[X] a G- relative if- invariant, if its stabiliser 
Stab G F := {a G G \ F a = F} in G equals if. A polynomial F G Z[X] 
is called an absolute if -invariant if Stabs„ F = H. 

For any subgroup if < S n we can consider the ring Z[X] H of absolute 
if-invariants and also the invariant field Q(X_) H of rational functions 
that are invariant under H. 

Remark 2.1. If H < G < S n is a pair of subgroups and if F G Z[X] 
is a G-relative H-invariant, then 

(1) As an extension of fields, Q(X) H is a finite extension ofQ(X) G 
of degree 

(Q(X_) H : Q(X) G ) = (G : H) 

(2) Furthermore 

Q(X) H = Q(X) G [F] 

that is, F is a primitive element for the extension. 

(3) From the main theorem on symmetric functions it follows that 

Z[X] Sn =Z[ai,...,<r n ] 

i 

where o~i = ^2 Yl Xj t are the elementary symmetric 

l<jl<-<ji<n 1=1 

functions. 

3. STAUDUHAR'S METHOD 

In this section we recall the necessary tools from Stauduhar's method. 
We do this in a slightly more general context which has the advantage 
that we can combine the information obtained by the resolvent method 
and by Stauduhar's method. 

Let us assume that we are given a monic polynomial / G Z[X] of 
degree n and we would like to compute the Galois group of /. Certainly, 
the Galois group is a subgroup of S n and therefore we can assume that 
we know a subgroup G < S n with Gal(/) < G. Assume furthermore 
that we have a proper subgroup H < G and let F G Z[Xl, . . . ,X n ] 
be a G-relative if -invariant polynomial. In the following we denote 
by G//H a set of representatives of right cosets Ha of G/H. The 
following is proved in [20] . 
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Lemma 3.1. Let F be G-relative H -invariant and assume that Gal(/) < 
G, where Gal(/) acts on the roots a>i,...,a n in some fixed closure. 
Then 

Rf:= J] (T-F°(a u ...,a n )) G Z[T]. 

aeG//H 

Rf is called the relative resolvent polynomial (corresponding to H < G 
and F). 

Proof. Since F H = F we see that Rf does not depend on the choice 
of coset representatives. The polynomial Rf is invariant under G and 
since Gal(/) < G it is invariant under Gal(/). Therefore all coefficients 
of Rf are in Q and also algebraic integers, thus in Z. □ 

Suppose that Rf is squarefree and we know a non-trivial factor of 
Rf in Z[T]. In this situation we can show that the Galois group of / is 
contained in a proper subgroup of G and therefore we make progress. 
In case Rf is not squarefree, we apply a Tschirnhausen transformation 
t G Z[x] and compute a new polynomial 

Rp,t-= J] (T-F*(t( ai ),...,t(a n ))). 

aeG//H 

It can be shown that there exist suitable transformations t such that 
Rfj is squarefree. Furthermore, introducing t amounts to a change of 
/ that will not affect the Galois group. 

The case of linear factors in the next theorem is proved in [20], in 
fact it formed the key technique in the original paper. The possible use 
of quadratic factors is mentioned on the last page of [T5] but is rejected 
there since the practical group theory would be too complicated. The 
general statement is also proven in JSJ Satz 2.4], although only the case 
of linear factors is used to determine groups. Higher degree factors are 
only considered in a verification step. 

Theorem 3.2. In the above situation assume that Rp is squarefree 
and that we know a factor A G Z[T] dividing Rp of degree degA = m. 
Denote by p : G — >■ Sc/h the permutation action on right cosets G/H. 
Then there exist o~\, . . . , a m G G such that 

m 

A(T) = l[(T-F^(a 1 ,...,a n )). 

i=i 

Denote by B the set of right cosets {Ho~i \ 1 < % < m}. 
ThenGal{f)<p- 1 (St & b p{G) {B)). 
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Proof. <7i,...,(7 m are in pairwise different right cosets of G/H since 
otherwise F ai = F a i and the polynomial A is not squarefree. Extend 
the <7j to a complete system of representatives a±, . . . , ay of G/H, where 
r = {G : H). Now let r G Gal(/) < G be an arbitrary element. The 
elements ra±, . . . , ra r are also a set of representatives of G/H. Since 
A is invariant under r G Gal(/) we get that for 1 < i < m : tcfi G -f/a., 
with j < m. Therefore we get that p(r) G Stab p ( G )(£?). □ 

We can also apply this theorem if we know more than one factor. 

Corollary 3.3. Assume that our squarefree Rf factorises via Rf = 
Ai • ■ ■ A s G Z[T]. Denote by Bi the set of right cosets of G/H corre- 
sponding to Ai. Then 

s 

GaK/^Qp-^Stab^)^). 
i=i 

A special case occurs, if we find a single linear factor. In this case 
we can describe the stabiliser in more detail. 

Corollary 3.4. Assume that R F is squarefree and has a linear factor 
in Z[T] corresponding to Ha for a G G. Then Gal(/) < H° := o~ x Ho . 

Proof. Note that a point stabiliser of p{G) is isomorphic to H. □ 

We remark that in the following we mostly use this Corollary since 
finding linear factors is much easier than doing a complete factorisation. 
In particular, we are frequently able to find linear factors without ever 
constructing R F completely. 

Nevertheless, there are situations where the ability to work with 
factors of degree > 1 is desirable. Mainly, this happens if we want to 
work with maximal subgroups U < G, where the index (G : U) is huge. 
If we apply Stauduhar's method to such a group pair, then the degree 
of the corresponding Rp is (G : U). Furthermore coefficient bounds 
that we need in our algorithm are dependent on this index. In such a 
case it could be nice to work with a subgroup H of smaller index and 
use higher degree factors in order to prove that Gal(/) is contained in 
a conjugate of U. 

Example 3.5. Let f G Z[X] be a polynomial with Galois group 19T5 
= Cig x Cg. This is a maximal subgroup of Aig of index 17!. Since 
19T5 is not 2-transitive, take S := StabA 19 ([l, 2]) the intersection of 
the point stabilisers of 1 and 2, take F := x\ — x<i and compute the 
resolvent Rf. This is a polynomial of degree 19 ■ 18 which has CKj — ctj 
as roots for 1 < i ^ j < 19 (assuming that those roots are different). 
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Furthermore, using resultants, Rp can be computed symbolically with- 
out explicit knowledge of S or F. Factorisation of Rp finds two factors 
of degree 171. When we apply Theorem \3.2\ we directly descend to the 
correct Galois group. 

Let a be a root of the polynomial / in the last example. The fac- 
torisation approach of the last example is equivalent to the fact that 
// (x — a) G Q(a)[x] factorises into two degree 9 factors. 

Very often the factorisation approach is not optimal or even feasible 
since the degree of the resolvent polynomial is too high for efficient 
factorisation. In some situations our algorithm produces a Galois group 
(as an actual permutation group on the roots) which is only correct 
with a very high probability. In this situation we can turn to the 
factorisation method in order to check our result, i.e. to give a proof 
that the result is mathematically correct. Since we assume knowledge 
of the action on the roots, it is not necessary to factor the resolvent 
polynomial. By analysing the proof of Theorem 13.21 we can write down 
the factor and check if it is in Z[X] and whether it divides the resolvent 
polynomial. Similar ideas were used by Casperson and McKay [2] to 
obtain polynomials with Galois group M n . 

Example 3.6. Let p be a prime number, G := S p+ i, and H : = 
PGL(2,p) < G. Then (G : H) = (p — 2)! and H is a maximal sub- 
group. Furthermore G is sharply 3-transitive which means that for 
the resolvent method we have to use a polynomial acting on 4-sets of 
the roots which has degree ( p ~^ 1 ) ■ For p=19 this polynomial has degree 
4845 and splits into four factors of degree 570, 855, 1710, and 1710 
resp. In our implementation we compute the Galois group using short 



cosets 7.1 with a very high probability. Then we use this group to ap- 
proximate the degree 570 factor. When computing the corresponding 
stabiliser according to Theorem \3. 6 2\ we descend to G. 

We remark that the group PSL(2,p) < A p+ i is not 3-transitive. The 
3-set polynomial, i.e. the resolvent corresponding to S := StabA p+1 ({l, 2, 3}) 
gives no information since this polynomial stays irreducible. But if we 
take the pointwise stabiliser S := StabA p+1 [1, 2, 3] (intersection of the 3 
pointwise stabilisers) then we will find 3 factors. The latter polynomial 
has only degree (p + l)p(p — 1) compared to ( p ~^ 1 )- 

As a final example in this section we consider a degree 40 polyno- 
mial with Galois group PGsp(4,3). This polynomial was computed by 
Tim Dokchitser and for reasons of space we do not give the actual 
polynomial here. The Galois group is primitive and not 2-transitive. 
Furthermore this group is maximal in A 40 . The algorithm outlined 
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below, using only linear factors computes the Galois group within 130 
seconds. However, factoring a suitable resolvent for the stabiliser of 
2- sets, completes the computation in only 23 seconds. 

4. Generic Invariants 

We fix two groups H < G < S n and assume unless explicitly stated 
otherwise, that if is a maximal subgroup of G. The aim of this section 
is to find a G-relative if- invariant polynomial F G Z[X] of small degree 
and a small number of terms. While the first aim can be obtained easily, 
the second is more difficult, and will be discussed later. To simplify 
notation we will write A to mean J^ agA a for suitable sets A, usually 
orbits. 

The first observation is that it is always easy to write down some 
invariant. Certainly, every S n -relative invariant is G-relative as well 
forif< G < S„. 



Lemma 4.1. 



is a S n -relative H-invariant. 



n-l 



a&H t=l 



While Lemma 14.11 proves the existence of G-relative ii-invariant 
polynomials it is a very expensive invariant from the point of view 
of evaluation. Even assuming that the powers of the evaluation points 
are stored, the evaluation of each term needs n — 2 multiplications, 
so that in total ^H(n — 2) multiplications are necessary. In order to 
improve on this we make use of the following well known facts ([5]): 

Theorem 4.2. For any polynomial I G Z[X], and every group H we 
have that F(X) := £{i h (X) | h G H} =: is H-mvanant. 

For every H-invariant polynomial F G Q[X], there exist monomials 
rrii and coefficients a« G Q such that 

r 
i=l 

Thus invariants of the form mH form a vector space basis for the 
ring of all invariants. 

The invariant ring Q[X] H of H invariant polynomials is a graded 
Q-vector space. The dimensions of the summands can be read of the 
Hilbert-series: 



Mt) :=J2 fd[m (RH) 



i=0 
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where (R H )i = {r e Q[X] H | degr = i} U 0. 

The Hilbert series can be computed from the knowledge of the classes 
of H under conjugation: 



di 

where (q,^) is the cycle structure of any representative of the class 
c of H . 

To improve on Lemma 14.11 we will try to find a small invariant as a 
basis element for some {Rujd for d as small as possible. Unfortunately, 
there are pairs of groups, G = S n , H = A n for example, where the 
invariant in Lemma [4. II can be shown to be of minimal degree. 

In the remainder of this section we will develop methods to compute 
a basis for (Rn)d the vector space of if- invariant polynomials of degree 
d and also for the subspace of G-relative polynomials. Our strategy 
will be to first compute a basis for the S n -invariant polynomials and 
then show how to refine this basis. We start with two observations: 

Remark 4.3. (1) Let F G Z[X] be a polynomial and H < S n be a 
group. Then 

aeH// Stab H {F) 

and thus is H -invariant. 

(2) Let m = Y]£=i ^-T ^ e a monomial. Then we have 

Stab#(m) = j^j Stab#({i | ai = a}), 

a£{ai\l<i<n} 

thus stabilisers of monomials can be computed as intersections 
of stabilisers of points or sets. Of course, for H = S n those 
stabilisers can be made explicit as direct products of suitable S m 
for m < n: 

(3) Let {1, . . . , n} — U r i=1 Ai be a partition. Then 



St a b Sn (A 1 ,...,A r ) = l[S Ai 



i=i 



4.1. S n -invariant polynomials. In this section we will develop meth- 
ods to compute a basis of S n -invariant polynomials as well as indicate 
how to improve on the general method if we want to aim for relative 
invariants only. The algorithm presented here is similar to the ideas 
presented in [H [11] . 
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The key idea here is that the orbit sum 

E r 

<reS„//Stab(/) 

does not depend on the representative / of the full orbit / Sn and that 
the action of the group on some monomial m only depends on the 
partition of {1, ... , n} induced by m = YYi=i ^T'- 

{l,...,ra} = (J {i | a,i = a}. 

aE{ai \1 <i<n} 

On the other hand, by giving a partition A := {Ai \ i} of {1, . . . , n} and 
pairwise different integers > the orbit of m(a, A) := Y[* =1 YljeAt -^T 
is uniquely defined by A already. Thus to solve our problem of finding 
a basis for (Rs n )d we simply need to find all partitions and exponents 
such that ^2i=i a %^-^% = d. We summarise this in an algorithm: 

Algorithm 4.4. Let d be an integer. We want to find a basis for 
(Rsjd- 

(1) Let /:={}. 

(2) Compute the set P of all partitions of d of length at most n. 

(3) ForpeP do 

(4) Letp=( Pl ,..., Pi ) . Append I by YY j=1 Xf 

(5) (end of the forp e P loop) 

However, since we are eventually only interested in finding minimal 
degree invariants we introduce more reductions here. The operation of 
S„ on m(a, A) does only depend on A, so for a minimal degree invariant 
we can also stipulate that + 1 = a i+i - otherwise the same behaviour 
can be obtained with smaller exponents. Similarly, minimal examples 
will be such that #A 1 > j^A 2 > . . . > j^A s . As an example: the 
orbits of X\X\ and of X\X\ are essentially the same, namely the orbit 
of {{1},{2}}. Thus if we are looking for examples of minimal degree, 
then X\X\ need not be considered. 

4.2. i/-invariants. Let if be a subgroup of S n and / be a set of mono- 
mials generating different S„-invariants via orbit sums. Here we address 
the problem of refining I to contain a (maximal) set of monomials gen- 
erating if-invariants. 

Let m be a monomial and S := Stabc(m) its stabiliser in some group 
S n > G > H . We use the following theorem 

Theorem 4.5. Let G > H be groups, m a monomial and S = Stabc(m) 
its stabiliser. Furthermore, let S\G/H be the double cosets of G with 
respect to S and H and let | 1 < i < r} be a set of representatives 
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(i.e., G = U r i=1 SgiH and SgiH = SgjH if and only if i = j). Then 
\m\ | 1 < i < r} generate linearly independent H -invariants. 

Proof. The linear independence is a direct consequence from the fact 
that the double coset decomposition induces a decomposition of m G 
into pairwise disjoint if -orbits. □ 

Thus the computation of if-invariants is reduced to the computation 
of S„-invariants followed by a double coset decomposition. While in 
general double coset decompositions are hard to compute, it is feasible 
here. We make use of the ladder-technique of [18]: Usually to com- 
pute double cosets, one computes a coset decomposition with respect 
to one group and lets the other group act on them, thus the complex- 
ity depends on the size of the index of the larger group in G. This 
procedure is frequently helped by computing a descending chain from 
G =: S > ■ ■ ■ > Sj = S down to one smaller group, S for example. 
The action of H on S \ G can then be deducted from the action of 
H on Si+i \ Si. Unfortunately, it is hard and frequently impossible to 
find good subgroup chains, that is chains with small indices. The new 
idea introduced in [18] is to use a ladder rather than a chain, i.e. to 
allow up-ward steps as well as down-ward ones. In order to use this 
technique we therefore have to construct a suitable ladder. This will 
be achieved by the following procedure: 

Algorithm 4.6. Let G be a permutation group acting on Q and ACQ 
be arbitrary. This algorithm will compute a ladder Gi such that G = 
Gq, G r = Stabc(^4) and if Gi < G i+ i then #Gi + i/#Gi < and 
Gi > G i+ i with #Gi/#G i+ i < otherwise. 

(1) Let B := {}, and i := 1, G := G. 

(2) for a G A do 

(3) add a to B and compute Gi := Stab^^a}. 

(4) if B ^ {a} then Gj+i := Stab^ B and set i := i + 2. Otherwise 
set i :— i + 1. 

Proof. Let A := {a 1; . . . , a n }, the properties of the Gi are direct conse- 
quences of the following facts: 

(1) We either have Gi = Stab^ ^{{ai, . . . , a s }, {a s+ i}} (in which 
case Gi < Gj+i) or 

(2) we have an up-ward step and obtain Gj+i = Stabc{ai, . . . , a s+ i}. 
Note that Stabc l+1 {a s +i} = Gi- 

(3) For G = S n , we have # Stabc{cii, • • • , a s } = s\(n — s)\ and 
# Stab G {{ai, . . . , a s }, {a s+1 }} = s\l\(n - s - 1)!. 
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(4) In general, Stabc A = G fl Stabs„ A, and for any groups V < 
U < S n we have (U f) G : V f) G) < (U : V), thus the bound on 
the indices follows. 

□ 

For more general partitions, the Algorithm 14.61 will be called repeat- 
edly: 

Algorithm 4.7. Let G be a permutation group acting on Q and A = 
{Ai,...,A s } a partition of Q. This algorithm will compute a lad- 
der Gi such that G = Gq, G r — Stabc(^4) and if Gi < Gj+i then 
#G i+1 /#Gi < #fi and d > G i+1 with #Gi/#G i+ i < #fi otherwise. 

(1) Let U := G. 

(2) For a e A do 

(3) Compute a ladder from U to Stab;y a using Algorithm \4-6] and 
print it. 

(4) Let U := Stabf/a. 

Let G < S n be arbitrary and H < G a maximal subgroup. In order 
to compute G-relative if-invariants, we now use one of the following 
algorithms: 

Algorithm 4.8. Let H < G be as above and d > be an integer. This 
algorithm will find a basis for the space of G-relative H-invariants of 
degree d. 



(1) Compute a basis B for (Rs n )d using \J^4 

(2) For each b G B do 

(3) Compute the corresponding partition A 

(4) [/se[777| to compute a ladder L from S n to Stabg n (6) using the 
partition A. 

(5) Use L to compute a set C of double coset representatives for 
Stab Sn 6\S n /if 

(6) For each c G C do 

(7) Compute the indices of the stabilisers (H : Stab// b c ) and 
(G : Stabc& c ). If they differ then b c generates a G-relative 
H -invariant. In this case print J2heH//stab H b c ^ ch 

The correctness of the algorithm follows immediately from the above 
discussions. We remark that if we want only one invariant rather than 
a basis, we can use a probabilistic approach: 

Algorithm 4.9. Let H < G as above and d > be an integer such 
there exists an G-relative H -invariant of degree d. This algorithm will 
find one G-relative H -invariant of degree d. 
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(1) Compute a basis B for (Rs n )d using U^J 

(2) repeat 

(3) Compute a random element a G S n 

(4) For each b G B check if {G : Stabc b a ) differs from (H : 
Stabf/fr 7 ). If so, print J^heH// stab H b CT ^ an ^ terminate. 

To find a (minimal) degree d such that there exists an G-relative H- 
invariant we simply compute the difference of the Molien series fn{t) — 
fc{t) = Yli^i s di an d take d as the index of any non zero coefficient. 



5. Special Invariants 

Unfortunately, there are examples where the generic invariants are 
too expensive to compute or the given presentation needs too many 
arithmetic operations to evaluate the invariant. The best known ex- 
ample for this are the groups H = A n and G = S n . Clearly, if is a 
maximal subgroup of G and the invariant 

n-l 

F 1 (X 1 ,...,X n ) :=X)(II**)' 

aeH i=l 

given in Lemma I4TT1 is a S n -relative y4 n -invariant polynomial of smallest 
possible total degree. If we store the powers of we need (n — 2)n!/2 
multiplications in order to evaluate this invariant. If the characteristic 
is not equal to 2, then a better invariant is well known: (for any a ^ 

H = An) 

F 2 (X 1 ,...,X n ):= 11 (X i -X j ) = F 1 -F?, 

l<i<j<n 

which can be evaluated using n(n — 1)/2 multiplications, if the factored 
form is used. 

Most of the special invariants presented here follow the same pat- 
tern and are derived from the same source, namely from the different 
action of G and H on natural objects like the action on blocks or block 
systems. Ultimately, as we saw above in the discussion of general fac- 
torisation patterns, we can use permutation presentations for G acting 
on the cosets by any subgroup V < G. 

In the following we assume that H < G < S n are acting on Q := 
{Xi, . . . , X n }. Let us start with the case that H is acting intransitively. 
The proof of the following lemma is trivial. 
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Lemma 5.1. Assume that there exists an orbit of H which is not 
invariant under G. Then 

(1) F(X u ...,X n ):= J2 x i 

is an H -invariant G-relative polynomial. 

We remark that intransitive groups may occur in our applications 
even if we start with transitive groups. The reason is that some of the 
following algorithms will reduce the problem recursively to groups of 
smaller degree. 

Let us assume for the rest of the section that the given groups H < 
G < S n are transitive. For transitive groups the notion of blocks 
and block systems are very important. We remark that most of the 
following invariants are well known, e.g. see [9| [TP]. 

Definition 5.2. Let G < S n be transitive and ^ B C Q be a subset. 
Then B is called a block, if for all g G G we have B 9 C\B := {X 9 \ X G 
B} n B G {0, B}. Blocks of size 1 and n are called trivial blocks. 

It is very easy to see that B 9 is a block if B is a block. By acting on a 
block B we get a partition of Q which is called block system. Therefore 
every block is contained in a block system. Furthermore it is easy to see 
that the blocks containing X\ are in 1-1 correspondence to the groups 
Gx x < U < G, where Gx x = Stabc{l} is the point stabiliser of G and 
U is the stabiliser of the block, i.e. U = Stab G B = {g e G \ B 9 = B}. 

If H < G then clearly every block(-system) of G is a block(-system) 
of H. But it may be the case that H possesses more blocks. 

Lemma 5.3. Let H < G < S n be transitive groups and assume that 
Bi, . . . , B m is a block system of H , but not one of G. Then 

m 

(2) F(X 1 ,...,X n ):=HJ2 X 

i=l X&Bi 

is an H -invariant G-relative polynomial. 

Proof. Every h G H only permutes the factors of F and therefore 
stabilises F. Let g G G \ H . Then there exist X{ and Xj lying in 
the same block which are mapped to different blocks. This produces 
a monomial of F 9 containing XiXj which does not exist in F. Since 
cancellations are impossible, we get the desired result. □ 

Now we can assume that the block systems of H and G coincide. 
Now let Bi, . . ., B m be a block system of H (and G). We can define 
two canonical actions of G and H. One is by simply permuting the 
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blocks which give transitive permutation representations G and H on 
m points. We get the following exact sequences of groups: 

1 ->■ N G ->■ G ->■ G ->■ 1, 1^N H ^H^H^1 

where A*g (resp. Af#) is the kernel of the permutation representation. 

In the case that N H = N G we can apply the following lemma. We 
remark that we always get Nh = N G if H ^ G and we assume that H 
is a maximal subgroup of G. 

Lemma 5.4. Let H < G < S„ be transitive groups with a common 
block system Bi, ... , B m . Assume that the above defined normal sub- 
groups Nh and N G are equal. Let E(Xi, . . . ,X m ) be an H-invariant 
G-relative polynomial. Then 

(3) F(X 1 , ...,X n ):= E(Y U . . . , Y m ) for Y t := ^ X 

xeB, 

is an H-invariant G-relative polynomial. 

Proof. Elements of Nh = N G only change the ordering of the sum 
defining Y$. Therefore an element g acts on F via the action of g on 
E. Therefore the polynomial F is if-invariant. In order to show the 
G-relativity, we need to prove that for g e G\H we have g ^ H. The 
last statement easily follows from Nh = N G . □ 

The other action can be defined within a block B 1 via Stab G (B 1 )\ Bl . 
We get the following invariant. 

Lemma 5.5. Let H < G < S n be transitive groups with a common 
block system B\, . . ., B rn . Let H := Stab//(5i)|^ 1 , G := Stab G (Bi)\B l 
and assume [G : H] — [G : H\. Let E{Xi 1) . . . , X^) where B\ = 
{X ix , . . . be an H-invariant G-relative polynomial. Furthermore 

let {o"i, . . . , a m } be a system of representatives of left cosets ofStabn(Bi) 
in H . 

Then F := E ai H — • + E° m is an H-invariant G-relative polynomial. 

Proof. An element of H can be uniquely written as a product of an 
element of Stabff(-Bi) and some G{. The first one stabilises E and the 
second one only permutes the E Gi . Therefore F is invariant under H. 
Since [G : H] — [G : H] we see that {<7i, . . . , cr m } are representatives 
of the left cosets of Stab G (-Bi) in G. Since an element g G G\H can 
be uniquely written as a product goi of an element g G Stabc(-Bi) and 
some o~i we get that the element g cannot be an element of Stabff(-Bi). 
Therefore E® ^ E. Furthermore the Xj which appear in E Ui are dif- 
ferent for different i's which shows that F 9 ^ F. □ 
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Now we have to deal with groups where the number of block systems 
is the same and it is not possible to use Lemma [5.41 or Lemma [5.51 In 
this situation, we can try the following ([9j 6.19]): 

Lemma 5.6. Let U := Stab# = Stab (Si)| Bl and K 1 < K 2 < 
U . Now let F be a K 2 -relative Ki-invariant such that O := F G = F H 
is not too large, finally let p : G — >■ So be the permutation repre- 
sentation of G on O. If p(H) 7^ p{G) then let Y be a p(G) -relative 
p{H) -invariant. For a suitable Tschirnhausen transformation t £ Z[x] 
we have that (F G = {F ai ,. . . , F a °} ): 

I :=Y(t(F^(X)),...,t(F^(X))) 

is a G-relative H-invariant. 

Proof. Since G and H act identically on the block B\, the orbits F G 
and F H are the same. By construction, / is clearly if-invariant, all 
that we need to show is that I is not G-invariant. Since F is not p(G) 
invariant, this is immediate. □ 

It should be noted that the use of blocks above is only part of the 
attempt to create an invariant F with a small orbit. 

The following theorem is a generalisation of a result of Eichenlaub [7] , 
who proved the corresponding result for wreath products of symmetric 
groups. We remark that a wreath product U\V is a semidirect product 
of the type U m x V, where V < S m and the action of V permutes the 
copies of U. For a formal definition we refer the reader to [6j p. 46]. 

Theorem 5.7. Let G = UlV be the wreath product acting on X^j (1 < 
% < d, 1 < j < m), where U < Sd, V < S m and md = n. Furthermore 
let N<U be a normal subgroup of index 2. Let E be an N -invariant ir- 
relative polynomial with the property that E u = —E for all u £ U\N. 
Denote by Sk the k-th elementary symmetric function on m letters. 
Then G has a subgroup H of index 2 and 

F\Xi t i, . . . , Xd t m) '■= s m (di, . . . , d m ) = d\ • • ■ d m 

is an H-invariant G-relative polynomial, where dj := E(X\j, . . . , Xdj). 

We remark that in the original statement given in [7J there are two 
other subgroups of index 2. One is Sd I A m < Sdl S m which can be 
dealt with Lemma 15.41 and the other one comes from the fact that 
whenever we have two subgroups of index 2, there will be a third one. 
An invariant for this can be efficiently computed using the first two 
invariants, see Lemma [5.81 

Proof. Clearly, we have N I V < U I V and using Lemma 15.51 we get that 
E + E u with u G U \ N is an iV I V- invariant G-relative polynomial. Let 
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u G U \ N be an arbitrary element and let U\ and u 2 be the canonical 
images of u in the first and second copy of U m in G, respectively. Now 
we claim that H = (N I V, uiu 2 ) < G. Clearly, F fixes all elements 
of TV I V because all di are fixed by elements of N and swapped by 
elements of V. The element uiu 2 fixes d 3 , . . . , d m and has the property 
that d\ lU2 = -dx and d u 2 lU2 = -d 2 . Therefore we get F UlU2 = F. For 
an arbitrary element g G G we get that F 9 = ±F and therefore the 
index of H in G is at most 2. Clearly, F Ul = — F and therefore H ^ G 
and F is G-relative. □ 

We remark that this invariant can be applied to groups G which are 
not a wreath product. E.g. it could be possible that G is contained in 
a wreath product, but not in the index 2-subgroup and H is contained 
in that index 2-subgroup. 

As already mentioned it is possible to combine relative invariants in 
order to get new ones. The following lemmata all work in this generic 
situation. Suppose G < S n has two subgroups H\ < G and H 2 < G 
with G-relative invariants F^. On the invariant field side, this cor- 
responds to Q(X) G having two finite separable extensions Q(X) G (F,) 
corresponding to Q(2Q Hi with normal closures M Ci and C, := Corec(-f^i) 
In this situation we can transfer information about Hi to all subfields 
(and the corresponding fix groups) of the compositum M Cl M° 2 = 

The first such example already appears in [7]. 

Lemma 5.8. Let G < S n be a permutation group which has two 
subgroups Hi ^ H 2 of index 2 with G-relative Hi-invariants Fi. If 
Ff = ±Fi for g G G, then there exists a third subgroup H 3 := (Hi D 
H 2 ) U ((G \ Hi) n(G\ H 2 )) of G such that F X F 2 is a G-relative H 3 - 
invariant. 

Proof. An element of Hi D H 2 clearly stabilises F. Therefore let h G 
H 3 \HiHH 2 . Then h <£ H 1 UH 2 and therefore F[ l = -F x and F% = -F 2 
which gives F h = F. This proves that F is if 3 -invariant. Let g G G\H 3 . 
Then g G H x or g G H 2 , but g Hi n H 2 . Therefore F 9 = -F and F 
is G-relative. □ 

Even if the invariants do not satisfy Ff = ±Fj, the above Lemma 
15.81 can be used, since for G / /H^— {Id, g} we see that Fi := F { — Ff is 
a G-relative ifj-invariant with the desired property Ff = —Fi. 

In the more general situation we can still use the field theoretic view 
to combine information from two (or more) subgroups: Assume G < S n 
has two subgroups Hi < G (i = 1,2) with G-relative ifj-invariants Fi, 
set #12 := Hi n H 2 and C t := Core G (^) for % G {1,2, 12}. Then for 
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any maximal subgroup C\ 2 < H 3 < G an G-relative H 3 invariant can 
be constructed by any of the following methods from F i: (i = 1, 2) and 
an G/Ci2-relative H 3 /C 12 invariant. Also, set K := Q(X_) G . 

(1) (Intransitive construction) Let Hi be the permutation represen- 
tation of G on Gj /Hi, i G {1, 2, 12}. We consider the subdirect 
product H\ Xh 12 H 2 = H\ 2 = GjC\ 2 . The maximal subgroup 
if 3 < G corresponds to a maximal subgroup H 3 < H\ 2 . Let F 
be an invariant for this pair, then F([Ff : s G Gf/Hx], [F 2 S : s G 
Gj / H 2 ]) is a G-relative if 3 -invariant. 

(2) (Transitive construction) By the primitive element theorem, we 
can find an invariant F, % — 1, 2 of degree 1 such that K(Fj) = 
®(X) Ci . Again, by the primitive element theorem, we find some 
r such that Fi + rF 2 is primitive for Q(X_) Cl2 . From here it is 
straight forward to obtain an invariant for H 3 as a polynomial 
in Fi + rF 2 . 

In general, this is only applicable if the indices of the participating 
groups are small. In particular the transitive construction is mainly of 
interest for normal subgroups. 

6. Intransitive groups 

The Stauduhar algorithm works for intransitive groups in the same 
way. Let / G Q[x] be a squarefree polynomial of degree n. Assume 
that / = /i • • • f r G Q[x] has r factors of degree rii, respectively. Then 
we know that Gal(/) is a subgroup of the intransitive group S ni x 
• • • x S„ r < S n . Using the methods for irreducible polynomials we 
can compute the Galois groups Gi := Gal(/j) < S„ r Then Gal(/) < 
Gi x ... x G r < S n . This direct product can be used as a starting 
group of our algorithm. 

In order to simplify the presentation, let us assume that Gal(/) < 
G\ x G 2 < S n . This is no restriction, since we do not assume that G\ 
or G 2 are transitive. Therefore we have a corresponding factorisation 
/ = fif 2 G Q[x], where we do not assume that f\,f 2 are irreducible. 
All groups H with Gal(/) < H < Gi x G 2 have a special structure. Let 
us start to theoretically describe Gal(/). Denote by N { the splitting 
field of fi. Furthermore define iV to be the compositum N\N 2 and 
M := JVi n N 2 . Let U be the Galois group of M/K. Then the Galois 
group of N/M is the subdirect product (fibre product) G\ Xjj G 2 with 
common factor group U. Denote by 0j : Gi — > U the corresponding 
epimorphisms. Then G± Xjj G 2 can be realized via 

G x x v G 2 = {(g l7 g 2 ) G d x G 2 \ fafa) = 2 (^ 2 )}. 
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Furthermore we see that this is automatically a normal subgroup of 
G\ x G 2 . 

Now let us consider the case that H = G± Xjj G 2 and G = G\ x G 2 . 
Define Vi < Gi to be the normal subgroups such that Gi/Vi = U . Then 
we get the following chain of subgroups: 

VixV 2 < G x x v G 2 <GiX G 2 . 

A Vi x ^-invariant G\ x G2-relative invariant can be computed by 
using the corresponding V^-invariant Gj-relative invariants defined on 
the components and the primitive field argument. This invariant can 
be improved to an G-relative .^-invariant by taking sums over elements 
from if//(Vi x V 2 ). 

In general, since the generic invariants are computationally bad, we 
would like to use special invariants in this case as well. However, none 
of them work for intransitive groups, so our only chance here is to 
compute a transitive representation of the larger group and then test 
for special invariants in the transitive representation. Let H < G and G 
be intransitive. If the G-orbits and the if-orbits differ, we get a trivial 
G- relative if -invariant from any if-orbit that is no G-orbit. Hence, we 
assume that the orbits are the same. Similarly, we assume that the 
action of G and H on the orbits agree. In this case we construct a 
transitive representation : G — > St of G on the set T := Yloeo 
where the product runs over all orbits. The image <f>(H) of if under 
this representation is again a subgroup of 0(G) and we can now test for 
special invariants. Assume I G %[X t \ t e T] is such an invariant. Then 
I(y(52 eo Xt ) I t G T) for some suitable Tschirnhaus transformation 
y G 7L\x\ is a G- relative if -invariant. 

Proof. For any fixed t e T it is clear that Xloeo i s a primitive 
element for (Q[X t \ t e T\^/Q[X t \ t E T}^ since all the conjugates 
^2 0( z X So s G T are different. □ 

7. Computation of Galois Groups 

In the previous sections we investigated a variety of special and 
generic constructions for invariants. Here we are going to discuss how 
they can be used to compute Galois group. 

To start, let / be an irreducible monic polynomial in Z[x] and let K 
be an extension of Q such that f(x) = YYi=i( x ~ a i)i i- e - K a fixed 
splitting field, not necessarily a minimal one. We want to compute 

Gal(/):=Aut(Q(a 1 ,...,a n )/Q)<S a\ ,...,a n ■ 
Since we assume / to be irreducible, Gal(/) is going to be transitive. 
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Suitable choices for K are p-adic fields or the field of complex num- 
bers. We will defer the choice of the field until we discussed the op- 
erations we need to perform with it. Thus we assume that (somehow) 
we are given a field K and the roots aa in some arbitrary but fixed 
ordering. 

The main algorithm will, starting with some group G > Gal(/) refine 
the initial guess by considering (maximal) subgroups. Hence the first 
step is a good starting group. 

7.1. Starting Group. Naively, obviously, Gal(/) < S n , so G := S n is 
a valid start. However, this is very bad for the subsequent steps as S„ 
has maximal subgroups of very large index. 

Set E := Q(«i) = Q(x) / f which is a number field of degree n. Using 
algorithms developed by Kluners [H] (or recently Kliiners, van Hoeij 
and Novocin [12J ) it is relatively easy to find subfields Q C F C E - or 
to decide that there are no subfields. By Galois theory, the subfields are 
in 1-1 correspondence to the (unknown) block systems of the (unknown) 
Galois group. Thus the non-existence of subfields proves the group to 
be primitive. 

Assuming we have a non-trivial subfield F = Q(/3) for /3 = Yl r i a i- 
Then B 1 := {ctj \ Yli r i a \ = 12 r i a i} is t ne block containing a\, the 
other blocks are computed similarly. From here, it is trivial to com- 
pute the wreath product Wf corresponding to this block system, and 
Gal(/) C Wf- The construction can be improved if we compute the 
Galois group of F/Q (and even more if we compute the group of F/E 
- but this is too expensive in practise). Doing this for all subfields, we 
compute a suitable starting group. 

If there are no subfields, hence Gal(/) is primitive, we can try to 
obtain a good starting group from factoring suitable resolvent polyno- 
mials as indicated above. 

7.2. Stauduhar. We assume now that we have some Gal(/) < G < 
S n . The next step is now to either prove that G is the Galois group or 
replace it by some smaller group H . Now let H < G be maximal. If 
we have subfields, we should also verify that H admits the same block 
systems as G, otherwise it cannot contain the Galois group. 

We now find a G-relative if-invariant F using any of the methods 
above, verify that 



If C is non-empty, then G := r\ ae cH a will be our new group. 




F T (a) if and only if ar e H 



C 



{a e G//H I F a (a) G Z}. 
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Remark 7.1. Obviously, if (G : H) is large, this is going to be very 
inefficient, if not impossible. If we have knowledge of some non-trivial 
element r G Gal(/), coming from some known automorphism of K , 
then we can aid the computation of C . Instead of G / / H we only com- 
pute 

G 1 / T H := {a G G//H | r G H a } 

the so called short-coset. The actual computation of G// T H can be 
performed even if (G : H) is too large to be computed [10, 4.6] 

However, we do not know how to test (jl]) effectively. All we do 
here is to apply some probabilistic test, i.e. test for some 100 cosets if 
the images differ and rely on an independent proof later to justify the 
result. 

7.3. Splitting Field. Now that we have looked at the components of 
the algorithm, we can discuss the splitting field. As we saw, we need 
to be able to quickly evaluate F(a), decide if two such evaluations are 
different and, finally, test if F(a) G Z. All of those tasks would be 
trivial if we could use an purely algebraic, exact representation of a 
splitting field K, however, since [K : Q] > # Gal(/) this is in gen- 
eral not practical. Using K = C as Stauduhar did is possible, but 
makes it difficult to decide if F(a) G Z, this would involve a careful 
analysis of the numerical properties of F. By restricting the invari- 
ants to be free of division, and using a suitable p-adic field K, we can 
overcome most problems, although we actually need both complex and 
p-adic information. We choose a suitable prime p and compute a finite 
extension K of Q p . The complex information is used to derive the p- 
adic precision necessary to guarantee correctness. Let < M be such 
that < M for all complex roots a^. It is now easy to compute N 
such that |F CT (a)| < N - for all a as we cannot align the ordering of 
complex and p-adic roots. Thus using a p-adic precision k such that 
p k > 2N means that we can easily find (the unique) R G Z such that 
F(a) = 9 mod p k and \R\ < N. 

To proof F(a) = 9 is equivalent to showing that Rf{9) = 0. Since 
R F G Z[t] and 9 G Z, we have R F {9) G Z. From F(a) = 9 mod p k 
we get p k \R F (9), while on the other hand |.Rj?(0)| < (|0| + iV) (G:H) , so 
either R F {9) = or 

p k < (\9\ + N) {a - H l 

so we can easily compute k large enough to proof R F (9) = 0. Unfortu- 
nately, k = 0(G : H), so k is too large to be useful in general. Similarly 
to the use of short cosets 17.11 we apply a hybrid approach. We choose 
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k large enough to find 8, i.e. k = O(logiV) and rely on a final proof 
step to verify the computation. 

7.4. Proof. We assume we have a subgroup chain G =: H > Hi > 
. . . > H r where we know that Gal(/) C Ho and some of the steps are 
proven (if the index {Hi : H i+ i) is small enough, the above method 
will prove that Gal(/) C H i+ i if Gal(/) C Hi) while others are not. 
Following [9J, we find indices i ^ j such that provably Gal(/) C Hi 
and probably Gal(/) C Hj. We then look for resolvent polynomi- 
als R coming from point-set stabilisers to verify this step: Assuming 
that Gal(/) C Hj, there has to be a factor I\R that does not exist if 
Gal(/) = Hi. 

7.5. Reducible Polynomials. Most of the outlined method applies 
to reducible polynomials as well, the key difference is that the groups 
occurring are naturally intransitive, which excludes most of the special 
invariants. Let / = Yl fi be squarefree and monic. We start by fixing 
a common splitting field K, compute the roots of / and compute the 
Galois groups Gi = Gal(/j) C S^. Galois theory now states that 
Gal / < Yl G i , so we re-start the algorithm above with / and G :— Y[ Gi 
as a starting group. We note that only subgroups H < G need to be 
investigated that project onto the full Galois groups of the factors, i.e. 
the final group is a subdirect product of the Gi. 

8. Numerical Results 

In order to test the procedure outlined in this paper, we applied it 
to the complete contents of a database of polynomials [16J with known 
Galois groups ( |http://galoisdb.math.upb.de[ ). This database contains 
explicit examples, sometimes many, for most groups of degree < 23. 
For more than 10 6 polynomials, a total of 4835 different Galois groups 
have been computed. In this range, for 4624 groups the average runtime 
was less than 5 seconds. Only 5 groups took more than 30 seconds to 
compute. 

Looking at some example in more detail. Let 

/ : = x 20 - 308x 16 + 33396x 12 - 1554608x 8 + 28579232x 4 - 113379904 

with Galois group 20T684 of order 61440. We start by factoring / 
modulo several small primes to select p = 89 for our splitting field which 
is an unramified cubic extension of Qsg. Next, subfields are computed, 
and we recurse by computing the Galois group of the degree 10 subfield 
first. Using the subfield data, we conclude that the Galois group of / 
is a subgroup of 20T992 of order 2 17 -3-5. This group has 6 maximal 
transitive subgroups, of which only one is a candidate for the target 
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groups, the others can be excluded by block systems or intersections 
with other known groups. The only group to test further is isomorphic 
to 20T807 of index 2 4 , for this pair of groups we construct a special 
invariant using 15.61 The group 20T807 now has 8 maximal transitive 
groups, 2 of which we need to test further. For both subgroups, both 
isomorphic to 20T684 of index 2, our algorithm fails to find special 
invariants, thus uses the generic ones from section HI Unfortunately, 
on evaluation of those invariants, we detect duplicate values, hence 
have to resort to Tschirnhaus transformation. In this example, we end 
up trying up to 10 different transformations of degree up to 7 before 
we find one to remove the duplicate values, hence makes the resultant 
squarefree and a descent is found. The resulting group again has 4 
maximal transitive subgroups, none of which however are possible, thus 
the computation terminates. The "long" runtime here is a result of 
the generic invariants one the one hand and the need for Tschirnhaus 
transformations on the other. By construction, the generic invariants 
chosen are of minimal degree but need > 500, 000 multiplications for 
a single evaluation. Due partly to the Tschirnhaus transformations, a 
p-adic precision of > 60 digits is used which then explains the runtime. 

Comparing this to other polynomials with the same group, we see 
that the runtime varies substantially (20 - 240 seconds) which is due 
to the number of Tschirnhaus transformations used: this depends on 
the polynomials and not (directly) on the group. In this example, 
the "nice" structure of the polynomial with lots of zero-coefficients 
indirectly causes the transformations, while we could "easily" fix this 
by a transformation of the original polynomial, this would also incur a 
drastic growth of the coefficients, thus rendering this mostly useless. 

Overall, the runtime can be seen to depend mainly on the groups as 
this determines the invariants and the descent tree transversed. Long 
runtimes typically are the result of bad invariants (generic invariants, 
frequently if the groups are very similar, i.e. small index). Large index 
subgroups, while posing a potential problem for the verification, are 
frequently easy to compute with: the short cosets reduce the number 
of candidates dramatically and the vastly differing groups make finding 
of invariants easy. 

9. Future Work 

The algorithm, as presented here, has two major weaknesses: it needs 
to find "good" invariants and it "needs" a small index in order to have 
verifiable results. Thus more work is needed to increase the num- 
ber of "special" invariants. In fact, work in this direction has already 
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commenced e.g. Elsenhans [8] found better invariants for pairs of in- 
transitive groups and for certain (large) pairs of 2-groups. In order to 
address the verification problem, maybe the use of non-linear factors of 
the resolvent polynomials as demonstrated in 13 .51 should be investigated 
further. 

However, as of now, we have a degree independent complete algo- 
rithm to compute Galois groups of univariate polynomials. The al- 
gorithm is very efficient and has been used on polynomials of degree 
> 100 already. 
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